CVE-2025-67168

Description

References

• handylulu/RiteCMS · Product
• handylulu/RiteCMS · Product
• mbiesiad/vulnerability-research · Exploit

Altre vulnerabilità di ritecms

• CVE-2025-67174ALTO 7.5A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal …
• CVE-2025-67173MEDIO 6.8A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via…
• CVE-2025-67171ALTO 7.5Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal.
• CVE-2025-67170MEDIO 6.1A reflected cross-site scripting (XSS) vulnerability in RiteCMS v3.1.0 allows attackers to execute arbitrary code in the context of a user's…
• CVE-2025-67172ALTO 7.2RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.